Lucene search
+L

2235743 matches found

Kitploit
Kitploit
added 2026/09/15 1:50 a.m.10 views

chatlog

Project Removal Notice Update Date: October 20, 2025 What Happened? Hello, thank you for following chatlog. I received a letter from WeChat's official team, which clearly indicates that the core functionality of the project poses compliance risks. In order to completely avoid legal issues and to...

5.9AI score
SaveExploits0
Kitploit
Kitploit
added 2026/09/15 1:50 a.m.6 views

cve_2019-5736-PoC

CVE-2019-5736 PoC This repository contains a C-based proof-of-concept exploit for CVE-2019-5736. This vulnerability allows a malicious Docker container to overwrite the host's runc binary and execute arbitrary commands on the host with root privileges – fully compromising the host system. Inspire...

9.3CVSS7.1AI score0.98452EPSS
SaveExploits35References1
Kitploit
Kitploit
added 2026/09/15 1:49 a.m.7 views

CVE-2020-11932

CVE-2020-11932 Double-Free bug in WhatsApp exploit poc. Note: Make sure to set the listner ip in exploit.c inorder to get shell nc -lvp 1337 or whatever port. and then compile. make or gcc -o exploit egiflib.c exploit.c then run ./exploit and save the content to .gif and send to victim. Source...

2.3CVSS5.7AI score0.00597EPSS
SaveExploits3References1
Kitploit
Kitploit
added 2026/09/15 1:49 a.m.6 views

CVE-2026-14856-TastyIgniter

CVE-2026-14856: Stored XSS to Account Takeover in TastyIgniter v4.3.0 📌 Summary A Stored Cross-Site Scripting XSS vulnerability was identified in the file upload functionality of the Media Manager in TastyIgniter v4.3.0. Due to insufficient validation and sanitization of uploaded .svg files, an...

6.3CVSS5.8AI score0.00286EPSS
SaveExploits0
Kitploit
Kitploit
added 2026/09/15 1:49 a.m.5 views

cve-2023-4911-exploit-optimized

Security Notice : This repository contains working exploit code for educational and research purposes. Use responsibly and only on systems you own or have explicit permission to test. CVE-2023-4911 Exploit Looney Tunables Optimized, multi-processing exploits for CVE-2023-4911 targeting x8664 and...

7.8CVSS6.9AI score0.81422EPSS
SaveExploits28References4
Kitploit
Kitploit
added 2026/09/15 1:49 a.m.3 views

fronthunter

FrontHunter FrontHunter is a tool for testing large lists of domains to identify candidates for domain fronting. Domain Fronting? Really? I know, I know… domain fronting is pretty old. But the truth is, it’s still useful as just another feature to include in your C2 infrastructure. When it comes ...

6AI score
SaveExploits0
Kitploit
Kitploit
added 2026/09/15 1:48 a.m.6 views

sylvia

iOS AArch64 Syscall Analyzer An IDA Pro script that scans an AArch64 binary for SVC instructions, resolves the BSD syscall number from the X16 register, and presents every result in a rich dockable UI, with per-syscall occurrence navigation and live man-page documentation fetching. Built for iOS ...

5.9AI score
SaveExploits0
Kitploit
Kitploit
added 2026/09/15 1:48 a.m.12 views

cottage

cott age is a GitOps tool for teams to manage age-encrypted secrets in git repositories. It provides a simple workflow to encrypt/decrypt secrets, manage recipients, and keep secrets out of the repo while still allowing for easy sharing via VCS. cottage also generates redacted previews of encrypt...

6AI score
SaveExploits0References50
Kitploit
Kitploit
added 2026/09/15 1:48 a.m.12 views

DSCourier_BOF

DSCourier BOF This is a BOF implementation of Dylan Davis and Matthew Schramm's DSCourier project. It uses WinGet's COM interface to execute arbitrary powershell code in a Microsoft signed and trusted process. Their full research blog can be found here. Unlike most projects I release, this is NOT...

5.9AI score
SaveExploits0References1
Kitploit
Kitploit
added 2026/09/15 1:48 a.m.4 views

BlobRunner

BlobRunner BlobRunner is a simple tool to quickly debug shellcode extracted during malware analysis. BlobRunner allocates memory for the target file and jumps to the base or offset of the allocated memory. This allows an analyst to quickly debug into extracted artifacts with minimal overhead and...

5.8AI score
SaveExploits0References2
Kitploit
Kitploit
added 2026/09/15 1:48 a.m.6 views

CVE-2026-41940-analysis

CVE-2026-41940 — cPanel & WHM Pre-Authentication Root Bypass via Session-File CRLF Injection A Defender-Focused Technical Deep Dive 1. Executive Summary Field| Value ---|--- CVE ID| CVE-2026-41940 CVSS v3.1| 9.8 Critical — Network / Low Complexity / No Privileges / No User Interaction...

9.8CVSS8.4AI score0.98527EPSS
SaveExploits75
Kitploit
Kitploit
added 2026/09/15 1:48 a.m.7 views

CVE-2024-53677

CVE-2024-53677 - Apache Struts 2 Remote Code Execution Vulnerability RCE Reproduction Environment This repository provides a container-based environment to reproduce the CVE-2024-53677 vulnerability in Apache Struts 2. This vulnerability involves path traversal and allows for arbitrary code...

9.8CVSS8.7AI score0.78198EPSS
SaveExploits15
Kitploit
Kitploit
added 2026/09/15 1:48 a.m.11 views

Awesome_shiro

Awesome-shiro CVE-2016-4437 Shiro Base64 decode -- AES decrypt -- Deserialize Environment Works on both linux/win10 Works on both python2/python3 Since the module directory contains ysoserial.jar, the project is a bit large. Please bear with us. Local Target Setup...

9.8CVSS7.5AI score0.93039EPSS
SaveExploits9
Kitploit
Kitploit
added 2026/09/15 1:48 a.m.211 views

adaudit

adaudit This PowerShell script is designed to conduct a comprehensive audit of Microsoft Active Directory, focusing on identifying common security vulnerabilities and weaknesses. Its execution facilitates the pinpointing of critical areas that require reinforcement, thereby fortifying your...

6.1AI score
SaveExploits0
Kitploit
Kitploit
added 2026/09/15 1:47 a.m.8 views

CRACK12

CRACK12 rooting an ATOZEE P12 on Android 14 using CVE-2022-38694 — because fastboot oem unlock said no, so we found another way. what even is this so there's this tablet. the ATOZEE P12. you've never heard of it. nobody has. it costs like $80 and the manufacturer's name sounds like someone fell...

7.8CVSS6AI score0.00586EPSS
SaveExploits2References4
Kitploit
Kitploit
added 2026/09/15 1:47 a.m.8 views

Malicious-MCP

Malicious MCP This is a proof-of-concept project that allows you to deploy an MCP server that "disguises" itself as any other MCP server. This MCP acts as an MCP 'Proxy', and simply forwards all incoming requests to an upstream MCP server. What is an MCP? An MCP Server is a program that expose...

6AI score
SaveExploits0References9
Kitploit
Kitploit
added 2026/09/15 1:47 a.m.18 views

guarddog

GuardDog GuardDog is a CLI tool that identifies malicious PyPI and npm packages, Go modules, Rust crates, RubyGems, GitHub actions, or VSCode extensions. It runs static analysis on package source code through YARA rules and analyzes package metadata to detect supply chain attacks. What makes...

5.8AI score
SaveExploits0References3
Kitploit
Kitploit
added 2026/09/15 1:47 a.m.8 views

kratosminifilter

🛡️ Kratos Minifilter — Windows Kernel Anti-Ransomware Driver Defensive Security Research Project — Windows minifilter driver developed in C++ for the real-time detection and neutralization of ransomware at the kernel level Ring 0. 📋 Table of Contents Overview Architecture Detection Mechanisms...

6AI score
SaveExploits0
Kitploit
Kitploit
added 2026/09/15 1:47 a.m.6 views

CVE-2023-27997

CVE-2023-27997 FortiGate VM64 7.2.0 is exploitable by this code. note that the code was written in a very stupid way. Proof of Concept root@kitploit: $ python3 exploit.py 192.168.106.142 10443 192.168.106.143 9999 + generating shellcode + salt=b'25c2dcf2' + processing hash + finding hash in cache...

9.8CVSS8.5AI score0.85689EPSS
SaveExploits10
Kitploit
Kitploit
added 2026/09/15 1:46 a.m.6 views

CVE-2026-0776

CVE-2026-0776 - Discord Client Uncontrolled Search Path Element Summary This repository documents CVE-2026-0776, a local code execution issue affecting the Discord Desktop Client on Windows. The vulnerability is related to unsafe module resolution behavior in Node.js-based components, which may...

7.3CVSS8.1AI score0.00382EPSS
SaveExploits1
Rows per page
Query Builder